Function _readWorkspaceIdFromFs

src/gep/paths.js:350–364

(file)

// Returns the id on a clean read, null on any error or missing file.
// Symlink rejection matches the pre-keychain hardening from PR #109.
function _readWorkspaceIdFromFs(file) {
  const dir = path.dirname(file);
  try {
    const dirStat = fs.lstatSync(dir, { throwIfNoEntry: false });
    if (dirStat && dirStat.isSymbolicLink()) return null;
    const fileStat = fs.lstatSync(file, { throwIfNoEntry: false });
    if (!fileStat) return null;
    if (fileStat.isSymbolicLink() || !fileStat.isFile()) return null;
    const raw = fs.readFileSync(file, 'utf8').trim();
    if (raw && /^[a-f0-9]{32,}$/i.test(raw)) return raw;
    return null;
  } catch {
    return null;
  }
}

// Atomically create <workspace>/.evolver/workspace-id with the given id
// (or generate one if `id` is null). Returns the id that ended up on